Cross-Site Scripting Flaw in Aterm WG2600HS Firmware by NEC
CVE-2021-20710

6.1MEDIUM

Key Information:

Vendor

Nec Corporation

Status
Aterm Wg2600hs
Vendor
CVE Published:
26 April 2021

What is CVE-2021-20710?

The Aterm WG2600HS firmware, specifically versions 1.5.1 and earlier, contains a cross-site scripting vulnerability that enables remote attackers to inject arbitrary scripts through unspecified vectors. This flaw poses significant security risks as it can lead to unauthorized access and execution of malicious scripts in the context of users’ sessions.

Affected Version(s)

Aterm WG2600HS firmware Ver1.5.1 and earlier

References

https://jpn.nec.com/security-info/secinfo/nv21-010.html
x_refsource_MISC
https://jvn.jp/en/jp/JVN29739718/index.html
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.